CVE-2013-1775
Published: 27 February 2013
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
sudo Launchpad, Ubuntu, Debian |
upstream |
Released
(1.7.10p7, 1.8.6p7)
|
| hardy |
Released
(1.6.9p10-1ubuntu3.10)
|
|
| lucid |
Released
(1.7.2p1-1ubuntu5.6)
|
|
| oneiric |
Released
(1.7.4p6-1ubuntu2.2)
|
|
| precise |
Released
(1.8.3p1-1ubuntu3.4)
|
|
| quantal |
Released
(1.8.5p2-1ubuntu1.1)
|
|
|
Patches: upstream: http://www.sudo.ws/repos/sudo/rev/ddf399e3e306 (1.7) upstream: http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f (1.8) |
||